Common Information
Type Value
Value
import "hash"

rule ccleaner_compromised_installer {
	condition:
		filesize == 9791816 and hash.sha256(0, filesize) == "1a4a5123d7b2c534cb3e3168f7032cf9ebf38b9a2a97226d0fdb7933cf6030ff"
}
Category
Type Yara Rule
Misp Type
Description
Details Published Attributes CTI Title
Details Website 2018-04-09 9 Creating custom YARA rules